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WHAT IS CLAIMED IS: 

1. An access control method for controlling an 
execution of an access content accepted from a user, 
the method comprising the steps of: 

accepting an access content representing a 
content of an access requested by the user; 

requesting an execution of the accepted 
access content by sending the access content along with 
an attribute of the user; and 

executing the requested access content in a 
range that matches the user attribute sent together 
with the access content. 

2. The access control method according to claim 
1, wherein a content of the user attribute to be 
disclosed is limited according to a user attribute 
disclosure policy. 

3. The access control method according to claim 

1, wherein a destination to which the user attribute is 
to be disclosed is limited according to a user 
attribute disclosure policy. 

4. The access control method according to claim 

2, wherein a destination to which the user attribute is 
to be disclosed is limited according to a user 
attribute disclosure policy. 

5. An access control system for controlling an 
execution of an access content accepted from a user, 
the system comprising: 

an access request unit to accept an access 
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content representing a content of an access requested 
by the user; 

an access demand unit to request an execution 
of the accepted access content by sending the access 
content along with an attribute of the user; and 

an access execution unit to execute the 
requested access content in a range that matches the 
user attribute sent together with the access content. 
6 . A computer-readable recording medium, which 

records a program for making a computer function as an 
access control system that controls an execution of an 
access content accepted from a user, the program 
recorded in the medium making a computer function as : 

an access request unit to accept an access 
content representing a content of an access requested 
by the user; 

an access demand unit to request an execution 
of the accepted access content by sending the access 
content along with an attribute of the user; and 

an access execution unit to execute the 
requested access content in a range that matches the 
user attribute sent together with the access content. 



